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A SYSTEM AND METHOD FOR PERFORMING SECURE 
CREDIT CARD PURCHASES 

1 

2 BACKGROUND OF THE INVENTION 

3 

4 Field of the Invention 

5 This invention relates to a system and method of performing 

6 secure credit card purchases in connection with remote 

7 commercial transactions, wherein a credit card holder does not 

8 have to reveal their credit card number to a merchant or a 
':!9 mechanism controlled by the merchant in order to accomplish a 
■1:0 purchase, and wherein the merchant is still assured of the 
^ri necessary credit verifications and approvals prior to 
4^2 authorizing and/or completing a credit card transaction, thereby 

^13 increasing overall security by minimizing any access to credit 

13 

card numbers without having to substantially modify or deviate 

|||5 from existing, accepted credit card transaction practices. 

17 Description of the Related Art 

18 The utilization of credit and debit cards to conduct 

19 transactions is ever increasing. This is especially the case 
2 0 with remote or "mail-order" transactions wherein merchants 
21 desire to be assured of a payment prior to shipping a product. 
2 2 For example, recent years have seen a substantial increase in 
2 3 the popularity of televised shopping networks to further 



fG/1. 706.98 

m 



supplement the popularity of catalogue type sales. Moreover, 
the increasing use and popularity of distributed computer 
networks such as the internet has also contributed to the 
dramatic increase in the number of remote commercial 
transactions conducted every day. 

One primary reason associated with the rapid growth of 
remote commercial transactions is the ability of a merchant to 
reach an almost limitless number of potential customers at a 
substantially insignificant cost and with little or no operating 
overhead since an actual store is not required. Additionally, 
such sales techniques permit customers to view the products and 
services in a greatly expanded marketplace, representing a great 
number of vendors, without extensive travel and without 
foregoing the privacy and convenience of their home or other 
predetermined computer site in some cases. Simply put, a 
telephone or like communication avenue is all that is needed to 
place the consumer in contact with the merchant and complete the 
transaction. 

The vast increase in popularity of remote commercial 
transactions conducted over the telephone or internet is further 
facilitated by the relatively simple protocols and procedures 
necessary to conduct such transactions. In particular, in order 
to complete a valid transaction, a merchant need not physically 
see the customer or the credit card, but must merely accept and 
enter a customer's credit card account number and an expiration 
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date thereof to obtain authorization. This same convenience, 
however, is the primary disadvantage and/or problem associated 
with conducting commerce in the manners set forth above. 
Specifically, there is a great reluctance on the part of the 
customer to transmit the credit card account information, 
including the credit card number, because of the proliferation 
of fraud, and a well recognized lack of security directed to the 
protection of such account information. Indeed, it has been 
established that security and privacy concerns are realistic due 
to the fact that credit card account data is easily readable or 
interceptable by unauthorized parties, and can be readily used 
for all types of remote transactions with minimal risk of being 
physically caught. In fact, unscrupulous individuals have many 
ways of gaining access to a consumer's legitimate remote 
transactions and thereby obtaining the credit card information. 
This information can be obtained from old credit card receipts 
or even from the unauthorized notation and use of the 
information by merchants or their employees after a legitimate 
transaction is made. Naturally, the latter is the most 
difficult to prevent utilizing known methods and systems unless 
a consumer is willing to completely forego the use of a credit 
card for purchases. 

In the case of computerized remote transactions, as 
messages, including account data or other confidential 
information, move across the internet, they can easily pass 
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1 through numerous computers, any one of which can be utilized to 

2 copy such confidential information or data, thereby leading to 

3 a further risk of potential fraud when conducting such 

4 transactions. Presently, some companies currently seek to 

5 address such security and privacy concerns by the employment of 

6 encryption programs and techniques. To this end there is an 

7 extensive facility associated with both public and private 

8 encryption schemes being deployed in order to guard the private 

9 or secured information being transmitted across the internet or 
LP like world wide networks. Unfortunately, however, even with 

such encryption techniques, the account information must usually 

III 

%k Still ultimately be transmitted to a third party who did not 

•sxz 

M previously have access to that information previously. Even 

HM some more sophisticated systems which seek to interpose a 

jJjB separate computer or encryption entity between the consumer and 

ll~6 the merchant so as to obtain authorization and forward it to the 

il|7 merchant, that information must still be made available to 

Ts and/or transmitted to that third party, thereby leaving open an 

19 avenue for fraud or theft. Further, such encryption techniques, 

20 even if minimally effective for computerized remote 

21 transactions, are not truly useable for other conventional types 

22 of remote transactions, or even normal in person transactions. 

23 Based on the above, there is an obvious need in the field 

24 of art associated with remote commercial transactions for a 
2 5 system and method of performing secure credit card purchases of 

4 

6 
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goods and services which truly reduces the risk of potential 
fraud and theft by eliminating outside access to a consumer's 
private credit card information without requiring complex 
encryption equipment or significantly altering the ease and 
convenience of current transaction techniques. Further, such a 
system and method should also be effective for use in 
conventional, "in person" transactions as well, thereby 
providing an added measure of security and minimizing the 
hazards associated with the passing on of account information by 
unscrupulous merchants. Also, such a system should provide 
limits to potential loss or liability in a manner which does not 
impede the transaction. 

Summary of the Invention 

The present invention is directed towards a system and 
method of performing secure credit card purchases, wherein 
payment for goods or services purchased is efficiently 
accomplished while eliminating the necessity of disclosure or 
dissemination of a consumers specific credit card number or 
other account data which the customer or other individual may 
wish to maintain in confidence. The system and method of the 
present invention incorporates the advantage of consummating the 
purchase by the customer through the selection of any one of a 
plurality of predetermined payment categories. Collectively, 
the payment categories represent a variety of methods for 
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1 accomplishing payment for a fixed transaction, a multiple 

2 transaction and/or a repeating transaction. 

3 One embodiment of the system and method of the present 

4 invention comprises a customer receiving information, including 

5 specific data necessary for the purchase of any given product or 

6 service. This promotional information generated by the merchant 

7 can be received by any of a plurality of conventional means 

8 including advertisements, catalogues, computer network 

9 connections, direct person to person customer and merchant 
10 contact, telephone solicitation, mail orders, television sales, 

tesf 

^1^1 etc. Once the customer has identified the product or services 

UJ2 which he/she wishes to purchase, the customer contacts and 

^^1|3 supplies a custodial authorizing entity with the requisite 

|M information concerning both the identification of a specific 

:i|5 credit card or debit card account and a requested payment 

lis category. Additionally, security against unauthorized use of 

'1^7 confidential account data may also preferably include 

'4^8 information relating to the merchant's identification and/or 

19 location. 

20 The custodial authorizing entity is preferably defined as 

21 the entity which has or has been assigned the custodial 

22 responsibility for the financial account data of a customer's 

23 credit card account, including a previous knowledge of the 

24 credit card number and other information such as credit limits, 

25 payment history, available credit amounts and other information 

6 

7 
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1 which will determine the status of a given credit card account 

2 in terms of authorizing a requested payment for a current 

3 purchase . 

4 As part of the security system for accomplishing a 

5 commercial transaction utilizing credit card or debit card 

6 payment, the custodial authorizing entity includes sufficient 

7 facilities, preferably including a processing computer or like 

8 applicable hardware for the generation of an exclusive 

9 transaction code. The transaction code is to be used in 
10 substitution for the credit card number and when utilized as 
jft authorized, will issue the merchant a credit approval, and will 
llh accomplish payment for the goods or services desired in the 
"IB normal fashion normally associated with a credit or debit card 
ii|4 transaction, without the publication or dissemination of an 
§j5 identifying credit card number for a specific customer's account 
lis to any entity that is not already aware of that information. 

Further, a feature of the transaction code is its ability 

'¥8 to indicate any one of preferably a plurality of predetermined 

19 payment categories which may be either requested by the customer 

20 or automatically chosen by the custodial authorizing entity 

21 based on the type of account or the type of purchase or other 

22 commercial transaction involved. Each of the payment categories 

23 are reflective of a different type of payment desired or 

24 required to consummate the intended purchase. More 

25 specifically, the plurality of payment categories may include a 

7 

/ 
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1 single transaction involving a specific dollar amount for a 

2 purchase within a specific time period, such as twenty four 

3 hours, during which authorization of the purchase remains valid. 

4 Alternately, a single transaction may be involved wherein a 

5 maximum limit or a dollar amount is determined above which the 

6 purchase will become invalidated and further wherein a fixed 

7 period of time is preferably established for maintaining 

8 authorization of such purchase. Other alternatives would 

9 involve one or more of the categories coded to define multiple 
transactions involving a maximum dollar amount for purchases, as 

55- well as a fixed period of time for authorization of such 

I II 

%k purchases, and/or a repeating transaction wherein payments may 

'lb be automatically accessed by a merchant over a predetermined or 

1114 unspecified time interval (such as every thirty days) for a 

Si 

il5 specific dollar amount or a maximum dollar amount limit. Also, 

•i . 

12^6 limits solely as to a specific merchant or a given time period 

.1^7 can be effectively established for which the transaction code is 

T8 valid. 

19 A further feature of the present invention to be described 

20 in greater details hereinafter, is the requirement that the 

21 transaction code, once received by the customer is transmitted 

22 to the merchant by the customer or a person specifically 

23 authorized by the customer. Only minimal contact by the 

24 merchant and the custodial authorizing entity is provided for 

25 purposes of the merchant verifying the validity of the 

8 

9 
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transaction code utilizing a conventional process electronically 
or otherwise similar to the verification of a credit card number 
normally offered to a merchant for the purchase of goods or 
services. There is, therefore, no disclosure, publication or 
other dissemination of the specific credit card number of a 
given customer account beyond those entities who already know 
the information, and the transaction code is transmitted 
exclusively to the customer by the custodial authorizing entity 
who has the ability to better identify whether the customer is 
properly authorized to use the account. Moreover, the 
transaction code, once given out by the customer, only has a 
limited usefulness, thereby limiting the risk of misuse and 
minimizing the potential losses to be experienced by the credit 
card company and/or the account holder. 

Accordingly, it is an object of the present invention to 
provide a system and attendant method for performing remote 
commercial transactions utilizing credit cards, which maximizes 
the security of the transaction and limits the potential 
liability to be experienced from a fraudulent transaction. 

Yet another object of the present invention is to provide 
a secure system and method for establishing credit card 
purchases which eliminate the disclosure or dissemination of the 
actual credit card number to anyone other than a custodial 
authorizing entity which normally has custodial responsibilities 
for account information including the previously established 
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credit card number. 

It is another object of the present invention to provide a 
system and method of establishing secure credit card purchases 
through the generation of a transaction code which renders it 
extremely difficult or impossible to access or infiltrate a 
customer's credit card account by unauthorized means. 

It is yet another object of the present invention to 
provide a secure method of completing a remote commercial 
transaction which eliminates the need to convey actual account 
information to a merchant, but which allows the merchant to 
conduct a normal verification of information needed to 
consummate a given purchase. 

It is also an object of the present invention to provide a 
system and attendant method of accomplishing secure credit card 
purchases which eliminates the need to disclose or disseminate 
a given credit card number while providing the customer with the 
versatility of choosing any one of a plurality of predetermined 
payment categories . 

It is yet another feature of the present invention to 
provide a system and method of accomplishing secure credit card 
payments having the versatility of allowing the customer to 
select any one of a plurality of payment categories which are 
indicative of a variance in the amount of a purchase as well as 
the time in which authorization for such payment is valid. 

These and other objects, features and advantages of the 
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present invention will become more clear when the drawings as 
well as the detailed description are taken into consideration. 

Brief Description of the Drawings 

For a fuller understanding of the nature of the present 
invention, reference should be had to the following detailed 
description taken in connection with the accompanying drawings 
in which: 

Figure 1 is a schematic representation of a flow chart 
showing various steps involved in the performance of the system 
and method of the present invention for the secure credit card 
purchasings- 
Figure 2 is a schematic representation similar to that of 
Figure 1 wherein customer to merchant contact is accomplished by 
conventional facilities such as television; and 

Figure 3 is a schematic representation similar that of 
Figure 2 wherein customer to merchant contact is established 
either by phone or in person. 

Like reference numerals refer to like parts throughout the 
several views of the drawings. 

Detailed Description of the Preferred Embodiment 

As shown in the accompanying Figures, the present invention 
is directed towards a system and method for accomplishing secure 
credit card purchases. Moreover, these purchases can be "in 
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person", but preferably include remote commercial transactions 
such as mail order, purchases over the internet, television 
solicitations, telephone solicitations, etc. Security is 
establish by virtue of the elimination of the need to disclose 
an active credit card number and expiration date to the merchant 
or any other party other than the original credit card company, 
issuing bank or like financial institution which already has 
custodial responsibilities for the financial or account data 
associated with a given customer's credit card account. 

More specifically and with reference to Figure 1 the system 
as well as an attendant method is preferably instigated by the 
customer viewing a product, identifying a desired amount for a 
transaction and/or receiving promotional information as at 10, 
either in person or by any of the electronic or more 
conventional techniques which will be described in greater 
detail with reference to Figures 2 through 3. Once the customer 
reviews the product or promotional information and has 
sufficient information, such as including price, product or 
service identification, payment requirement, etc., regarding the 
remote commercial transaction to be conducted, the customer 
contacts, either by computer, telephone or in person, a 
custodial authorizing entity as at 12. The custodial 
authorizing entity may herein be defined as comprising that 
entity or institution which has or has been designated by the 
entity which has custodial responsibility for the financial data 

12 
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and security of a given credit card account of a customer. As 
set forth above such custodial authorizing entity can be 
represented by the credit card company issuing a credit card to 
a given customer or alternately can be represented by a bank or 
other financial institution serving to sponsor a credit card or 
debit card to the extent of processing the debits and credit 
associated therewith. The authorizing entity* s custodial 
responsibilities of course includes the previous knowledge 
and/or storage of the credit card number serving to identify a 
specific customer's credit card account. Once contacted, the 
customer then supplies appropriate identification data to inform 
the custodial authorizing entity of a specific customer's credit 
card account as at 14. In addition, the customer will supply 
the custodial authorizing entity with additional required 
information needed to consummate the purchase as well as ensure 
the security of the account in order to prevent its unauthorized 
use. Such additional information may preferably include the 
identification of the merchant or merchants involved, when such 
information is deemed necessary, and a requested one of a 
plurality of predetermined payment categories to facilitate 
consummation of the purchase of the products or services 
desired. Such predetermined plurality of payment categories 
will be discussed in greater detail hereinafter. 

Once the appropriate information has been received from the 
customer as indicated at 16, the custodial authorizing entity 
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verifies the credit card status and account identification of 
the customer to determine the viability of the account in terms 
of dollar amount limits, payment history, available credit 
balance, etc. If the accessed credit card account is not in 
good standing, the custodial authorizing entity will permanently 
or temporarily terminate the transaction as at 18 and/or 
communicate to the customer directly as at 18' by any applicable 
means for purposes of informing the customer of the unacceptable 
status of the accessed credit card account. If the credit card 
account is in good standing, based at least in part on the 
requested payment category, (amount of payment) , the custodial 
authorizing entity generates a transaction code as at 20. The 
transaction code is used in substitution for the specific credit 
card number which would normally identify a customer's credit 
card account and would allow access thereto by any entity having 
possession of the credit card number whether or not such 
possession was authorized or unauthorized. More specifically, 
the transaction code is pre-coded to be indicative of a specific 
credit card account, preferably a merchant or merchants 
identification and a designated payment category, selected from 
the plurality of predetermined payment categories as set forth 
above. Once generated, the transaction code is communicated 
exclusively to the authorized and verified customer by the 
custodial authorizing entity as at 22, wherein the system and 
method of the present invention preferably restricts 

14 
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1 communication between the custodial authorizing entity and the 

2 merchant except to conduct a normal verification as will be 

3 explained. 

^ r . /) y-iS^ '^he verified customer thereafter and pref erablv/within a 

5 tim4 limit to be determined by the customer and/pre-coded in 

6 association with the transaction code, will d;i<rectly or through 

7 an authorized representative communicate tjire transaction code to 

8 the merchant as at 24 . The system andr niethod of the preferred 

9 embodiment of the present inventionr contemplates that only the 
10 verified customer will transmit/uhe generated transaction code 

#1 to the merchant in the case qf^ a remote commercial transaction, 

[11 

i3j2 thereby limiting knowledge of the transaction code to those 

•il3 parties having a need y€o know . Of course , however, as the 

|l|4 transaction code wiLST generally have a limited value as defied 

?1]5 by the verified (sustomer when obtained, the verified customer 

= 16 may designate/an agent or other entity to act as the customer on 
his/her b^alf, with the amount of potential liability to be 

'4:^8 experle?nced by such a transaction to be limited to the amount 

19 deteuied by the verified customer when obtaining the transaction 

2 0 /rode . 

21 At this point the purchase is consummated at least from the 

22 customer standpoint in that the customer has previously 

23 established the acceptable status of the account. Therefore the 

24 customer feels free to disclose the transaction code to the 
2 5 merchant or merchants instead of the actual credit card number 

15 
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1 as at 22, 24 and is relatively unconcerned if the transaction 

2 code is published or otherwise disseminated to unauthorized 

3 entities. In a preferred embodiment wherein a merchant 

4 identifier is pre-coded in association with the transaction 

5 code, the pre-coding of the transaction code will prohibit an 

6 unauthorized use due at least in part to the fact that the 

7 merchant is specifically identified and any attempt to use the 

8 transaction code other than by the identified merchant will be 

9 prohibited. In addition, the merchant is prevented from 

10 "overcharging" or "extending" the purchase by fixing the dollar 

LI 

4h amount to satisfy the specific cost or limit of the purchase as 

III 

ilte well as a specific time limit or time parameters in which the 

13 authorization for payment is valid- Such information, as set 

iI14 forth above, is communicated by the requested and subsequently 

ii|5 designated payment category as set forth above. Restricted 

jl6 communication between the merchant and the custodial authorizing 

'IJv entity as at 2 6 is permitted exclusively for purposes of 

■,f% 

'¥8 verification of the transaction code in a manner, which may 

19 utilize, at least to some extent, conventional facilities for 

20 the verification of a credit card number by most merchants or 

21 like commercial establishments. As a result, the merchant also 

22 has a desired verification as to the validity of a transaction 

23 and can effectively make arrangements to be paid by the credit 

24 card company. 

2 5 If for some reason the transaction code is refused 

16 
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verification, the customer may be informed directly by the 
merchant as at 2 8 and or the transaction may be terminated as at 
30. Assuming verification of the transaction code by the 
custodial authorizing entity, the merchant proceeds to 
consummate the purchase and send the order, as at 32, in the 
case of a remote commercial transaction. 

Figures 3 and 4 are representative of the versatility of 
the system and method of the present invention wherein the 
customer 54 may receive the aforementioned promotional 
information from the merchant 56 by any appropriate means such 
as television solicitation as at 58, phone solicitation as at 60 
and/or personal solicitation as at 62. Once the customer 
receives the promotional information, which may include the 
viewing of the product itself, or in advance if a general 
estimate as to the ultimate cost of an anticipate purchase (s) 
can be made prior to viewing promotional information, the 
customer contacts the custodial authorizing entity 64 by any 
appropriate electronic or conventional facilities such as direct 
phone to phone contact as at 66 and 66' or direct computer 
contact as at 42*, 45'. Once the customer's authorization is 
confirmed, details of the anticipated transaction are 
established so as to determine a payment category, and the a 
transaction code is issued to the customer. The customer, 
either directly or through a representative, can then utilize 
the transaction code to consummate a transaction within the 
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1 defined parameters of the payment category. Moreover, the 

2 merchant 56, through a conventional, yet restricted 

3 communication with the custodial authorizing entity 64 by any of 

4 a plurality of conventional or electronic methods using computer 

5 to computer linking as at 44 • , 45* or by telephone transmission 

6 as at 56 \ 66*, can obtain a verification and subsequent payment 

7 utilizing the transaction code only. 

8 As emphasized above, an important feature of the present 

9 invention is the ability of the customer to request a desired or 
1.0 a required payment category and the ability of the custodial 

:& authorizing entity 64 and/or a processing computer 45 of the 

111 

ftl2 custodial authorizing entity to issue a transaction code in 

'113 accordance with the payment category. The payment categories, 

s||4 may be collectively defined as a variety of different types of 

{15 transactions. Such transactions may include a single 

ili6 transaction for a specific amount of a purchase to be 

.^li? consummated. Alternatively, the payment category may include a 

'18 single transaction defined by a single purchase having a maximum 

19 limit amount, wherein the specific or precise cost of the 

2 0 purchase has not been determined for a variety of reasons, and 

21 as such, the customer desires to set a maximum amount for which 

22 the single transaction may be made. Accordingly, with such a 
2 3 payment category, the exact amount may not be known in advance, 

24 but the customer is assured of not paying over the specifically 

25 designated maximum limit. In addition, the transactions are 

18 
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preferably, but not necessarily, authorized to be conducted only 
over a fixed life period of time, such as within twenty four 
hours, thereby ensuring that an outstanding transaction code 
does not remain valid if not used as generally intended. This 
limited time period can, of course be varied or omitted 
depending upon the wishes of the customer and/or the policies of 
the custodial authorizing entity. Also, these or any other 
payment category transactions may include a specific merchant 
identification to further restrict use of the transaction code. 

The payment category may also include a mult i- transact ion 
authorization wherein more than one purchase may be made from 
one or a plurality of different merchants, each of which may or 
may not be identified by the customer and pre-coded in 
association with the transaction code, and wherein a total cost 
of the plurality of purchases may not exceed a maximum limit 
amount. This transaction can also be limited to having to take 
place within a predetermined, designated fixed life span, such 
as but not limited to twenty four hours. Accordingly, in some 
instances wherein a customer, or an agent of the customer, such 
as a child, guardian, or care giver, must make a number of 
transactions or purchases which are authorized by the customer, 
the customer may designate a maximum amount which can be spent 
utilizing a particular transaction code within a predetermined 
period of time, and/or can designate that only one merchant, 
whether designated or not, can use the transaction code. 
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As yet another alternative, the payment category may 
include a repeating transaction for a specific amount to be paid 
in each of a fixed number of intervals. For example, the 
customer may which to join a gym or receive services or products 
over a fixed number of payment intervals, such as every thirty 
days. Accordingly, the merchant will be authorized to charge 
the credit card account designated by the corresponding 
transaction code a fixed monthly payment. Similarly, a 
repeating transaction for a stated minimum interval such as 
every thirty days may be authorized for a specific amount for an 
unspecified number of intervals wherein the merchant will be 
authorized to continuously obtain payment on a "monthly" basis 
until the customer decides to cancel such authorization. Also, 
a more open ended transaction wherein charges may be performed 
until cancelled and with or without other limiting criteria may 
also be provided. 

Since many modifications, variations and changes in detail 
can be made to the described preferred embodiment of the 
invention, it is intended that all matters in the foregoing 
description and shown in the accompanying drawings be 
interpreted as illustrative and not in a limiting sense. Thus, 
the scope of the invention should be determined by the appended 
claims and their legal equivalents. 

Now that the invention has been described. 



